Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
File:                     hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json)
Hash identifier:          eEGytsIkz2o3aogVcUZHVVT1Ih5+cgIa/1c2TEgrTTs=
Subject key identifier:   18:AF:44:C2:E4:FA:8D:02:0E:CB:8B:55:CF:40:6F:54:AE:B8:7A:AE
Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Certificate issuer:       /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Certificate serial:       01974D4470723B2EEECA999745985D99DFFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 02:00:20 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:20 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:20 +0000
Files and hashes:         1: JzMC6J-x27UinyjGPkrtJtPKKbM.roa (hash: MM6S0DzqbOgEC1Eeh2U4n74HZ5Ntf2dFAQc2wkIxZDw=)
                          2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: BhHdQwpVM6Wi79SH7eXm72OMZVhvwcdoNZ94H2KE/IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:70:72:3b:2e:ee:ca:99:97:45:98:5d:99:df:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
        Validity
            Not Before: Jun  8 02:00:20 2025 GMT
            Not After : Jun  9 02:00:20 2025 GMT
        Subject: CN=18af44c2e4fa8d020ecb8b55cf406f54aeb87aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:99:96:24:62:fc:12:27:ce:5f:3a:3a:2d:
                    dc:df:d3:a8:fa:84:c0:94:f5:5b:f3:62:74:6a:b9:
                    f1:c3:65:cd:5b:92:0e:16:9d:85:36:7e:28:ac:58:
                    30:6c:7b:22:e8:46:f2:e4:27:74:b2:43:75:99:f7:
                    93:d0:74:04:f4:f0:dd:a4:41:8f:f1:e9:27:f5:e6:
                    02:98:ec:3e:32:92:c2:7d:06:50:97:e1:c1:2d:f4:
                    04:74:dd:b1:18:52:4c:0c:cd:e5:64:c4:4c:99:28:
                    61:e6:b5:d2:42:d9:43:ac:a9:7c:32:a9:d1:df:28:
                    c3:51:99:67:7b:0f:c6:07:95:e4:b8:62:64:00:be:
                    aa:5c:76:df:2d:86:e3:64:e7:3d:9e:dc:b4:45:16:
                    3e:23:d5:ee:28:4f:65:7b:3d:8a:7d:38:dd:fe:cc:
                    7b:49:7c:0c:a9:c8:69:88:0d:9e:e8:b0:6e:ff:f2:
                    ae:64:48:cd:28:e3:0d:56:5f:c4:96:71:53:bb:f7:
                    a6:d5:5b:a2:94:13:00:0a:48:f1:b2:ca:f3:cb:b9:
                    bd:87:91:9f:df:57:87:45:6e:e4:5a:77:72:ac:13:
                    82:df:69:2a:2a:4e:91:6b:96:c2:db:0a:16:ec:d8:
                    f6:12:4c:d4:0d:1b:74:5e:6d:ec:da:67:75:0d:ad:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AF:44:C2:E4:FA:8D:02:0E:CB:8B:55:CF:40:6F:54:AE:B8:7A:AE
            X509v3 Authority Key Identifier:
                keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:76:d5:95:e7:e5:2b:8f:9e:8b:41:45:00:5b:51:81:a0:0c:
         d1:3f:f8:ad:d2:b7:13:14:79:4d:43:08:c8:e2:55:f0:3b:dc:
         6c:39:79:05:72:50:fb:97:8c:06:d7:85:2a:87:71:d0:31:fa:
         79:9c:da:ae:05:fe:53:57:32:af:6d:f0:73:34:ed:62:5f:73:
         76:f5:5f:df:da:59:7f:8a:f7:b6:34:a5:54:32:5c:d4:f1:1b:
         66:34:99:4a:08:60:c2:6e:e2:90:24:f9:9c:e4:01:e4:82:73:
         5e:b6:03:09:da:99:8d:8e:33:8c:a5:3d:24:15:ad:96:50:e1:
         dc:cc:76:89:f7:8b:fb:c9:38:55:62:1e:ea:24:9e:f9:e7:61:
         e4:dd:87:82:34:0b:e9:dc:a7:f7:87:47:2f:43:c8:ba:c8:3f:
         0d:ae:d9:1c:c5:9b:30:76:31:de:df:e0:6f:37:49:82:a0:1f:
         13:8d:9f:67:51:26:fb:d6:4b:52:91:66:27:c0:a4:b5:e7:14:
         20:72:79:31:a8:3b:54:22:60:e4:a2:2e:1e:e9:1f:a8:c1:f7:
         c4:e3:13:55:db:49:1a:a0:8e:12:6d:00:fc:86:40:f7:c6:5d:
         fa:e7:b7:cb:ee:dd:9c:09:4e:cb:98:1e:23:0f:63:ce:58:4d:
         52:9d:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:59 2025 by rpki-client